Storm-1175 actor deploys new StormEncryptor ransomware after N-central vulnerability exploitation

Microsoft Threat Intelligence indicates that Storm-1175, believed to be China-based, likely exploited an authentication-bypass vulnerability (CVE-2026-18577) in N-able's N-central remote monitoring and management tool to gain initial access.